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Description 

Field of the Invention 

5 [0001] This invention relates to blood apheresis, and in particular to automated apparatus for collecting and fraction- 
ating blood into components according to defined protocols. 

Background of the Invention 

10 [0002] Whole human blood includes predominantly three types of specialized cells: red blood cells, white blood cells, 
and platelets. These cells are suspended in a complex aqueous solution of proteins and other chemicals called plasma. 
Although in the past blood transfusions have used whole blood, the trend is to transfuse only those blood components 
required by a particular patient. This approach preserves the available blood supply and in many cases is better for 
the patient (e.g., by preventing exposure to inadequately or improperly screened blood that may harbor disease). 

15 [0003] The blood components needed for the transfusion are taken from a donor by a process called apheresis in 
which the desired one, or more, specific components of the whole blood are separated and harvested by a blood- 
processing machine. The remaining components are then returned to the donor. 

[0004] An overriding concern in the manufacture and use of the blood processing systems is donor safety. To guar- 
antee this safety a number of potential threats to the donor must be continuously monitored by redundant systems. 

20 For example, the existence of air in the blood components returning back to the patient, excessive pressure in the 
returning blood components, the ratio of blood to added anticoagulant, and extracorporeal blood volume are detected 
by sensors, the outputs of which are continually monitored. Extreme measures in both design and construction of 
automated blood-processing equipment are taken to avoid malfunction so that any possible danger to the patient or 
donor is negated. For example, present-day equipment ordinarily includes systems for monitoring operating voltage, 

25 centrifuge spin rates and continuous data-processing operation. 

[0005] Current blood-processing systems typically consist of two main components. A disposable, i.e., one-time-use 
product (or product set) that is used for a specific purpose then discarded; and a multipurpose blood processing machine 
unit that performs various functions in connection with various protocols. See, for example, U.S. Patent No. 5,387,1 87 
(issued 2/7/95), herein incorporated by reference in its entirety. Two exemplary protocols that lend themselves to au- 

30 tomation are the "single-donor platelets" (SDP) protocol and the "platelets and plasma" (PLP) protocol; both of these 
protocols can be carried out with the same disposable set. In the SDP protocol, a platelet concentrate is collected from 
an individual donor in one procedure. Blood is drawn from the donor and passed through a centrifuge bowl, which 
separates the blood into red cell, white cell, platelet and plasma components. The platelet fraction is collected, ordinarily 
in a removable, sterile blood bag, until a desired yield is obtained; the remaining fractions are returned to the donor. 

35 in the PLP protocol, both platelet and plasma fractions are retained, ordinarily in separate containers. Specific param- 
eters and operating procedures to effectuate these protocols are well-known to those skilled in the art. Other apheresis 
protocols (e.g., harvesting of fresh plasma; therapeutic plasma exchange, in which a patient's plasma is replaced with 
plasma from a healthy donor; mononuclear cell collection, in which white cells are removed; and red-cell collection, in 
which red cells are removed) are also well-characterized in the art. 

40 [0006] The disposables used in these protocols generally consist of a centrifuge bowl and blood-compatible tubing 
coupling various blood bags and anti-coagulant bags to input/output ports on the bowl. For example, seethe disposable 
apparatus illustrated in Fig. 1 of U.S. Patent No. 4,946,434, incorporated herein in its entirety by reference. The bowl 
may be a plastic/transparent centrifuge bowl of the type described in U.S. Patent No. 5,045,048 (issued 9/3/91) or U. 
S. Patent No. 4,983,158 (issued 1/8/91), each of which is incorporated herein by reference in its entirety. Usually, the 

45 disposable is pre-packaged in a sterilized container for delivery to the end user, who actually installs it on the blood- 
processing machine. Due to the disassociation between the machine and the protocol, it is of vital importance that only 
the correct disposables be used with the correct machine protocol and vice-versa. 

[0007] WO-A-80 02376 discloses a computer controlled medical care system wherein modular vessel structures are 
keyed to specific procedure programs ensuring that the vessel is compatible with the procedure, thereby preventing 
50 operator errors. 

[0008] According to the present invention there is provided a blood-processing machine in accordance with Claim 1 . 
[0009] Generally, an aspect of present invention is directed to a combination of a blood processing machine and a 
disposable product. The product includes a manifold which carries a machine-readable indication identifying the type 
of disposable to the multiprotocol blood-processing machine. The disposable comprises a centrifuge bowl for separat- 
es jng whole blood into blood constituents, an inlet tube for admitting blood into the bowl, an outlet tube for conveying the 
separated blood constituents from the bowl, and a manifold for placing the inlet tube in fluid communication with a 
donor and with the outlet tube via the bowl. As previously indicated, the manifold carries a machine-readable indication 
identifying the type of disposable to the blood-processing machine. 
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[0010] In a preferred embodiment, the machine-readable indication is a bar-code label. Also, the disposable type is 
identified by the machine-readable code so that the blood processor can ensure that the disposable corresponds to a 
selected apheresis or blood-processing protocol. The manifold may also comprise arcuate tubes that cooperate with 
peristaltic pumps of the blood-processing machine. 
5 [001 1 ] The invention ensures compatibility between a blood-processing machine and a disposable set installed ther- 
eon by electronically identifying the disposable type, then determining whether the identified type is compatible with 
the machine. 

[0012] The above and other features of the invention including various novel details of construction and combinations 
of parts, and other advantages, will now be more particularly described with reference to the accompanying drawings 
to and pointed out in the claims. It will be understood that the particular device embodying the invention is shown by way 
of illustration and not as a limitation of the invention. The principles and features of this invention may be employed in 
various and numerous embodiments without the departing from the scope of the invention. 

Brief Description of the Drawings 

15 

[0013] In the accompanying drawings, like reference characters refer to the same parts throughout the different 
views. The drawings are not necessarily to scale, emphasis instead being placed upon illustrating the principles of the 
invention. Of the drawings: 

20 Fig. 1 is a perspective view of the blood-processing machine; 

Fig. 2 is a top plan view of the blood-processing machine; 

Fig. 3 is a partial side perspective view of the blood-processing machine; 

25 

Fig. 4 illustrates an exemplary disposable for the blood-processing machine, schematically showing the points of 
connection thereto; 

Fig. 5 depicts a manifold for a disposable such as that shown in FIG. 4; 

30 

Fig. 6 is a block diagram of the hardware of the blood-processing machine; 

Figs. 7a and 7b together depict a flow diagram implementing a general process-control architecture; 
35 Fig. 8 is a flow diagram implementing a user-interface manager; 

Fig. 9 is a flow diagram implementing an instrument-control manager; 
Fig. 1 0 is a flow diagram of the sequence steps in a draw; 

40 

Fig. 1 1 is a flow diagram of a task manager; 

Fig. 12 schematically illustrates a sequence table stored on an insertable memory card; 
45 Fig. 1 3 illustrates the division of code if only a single, internal (i.e., non-insertable) memory device is employed; and 

Fig. 14 is a flow diagram of a tutorial selectable from a list of protocols. 
Detailed Description of the Invention 

50 

[0014] Refer first to Figs. 1 through 3, which illustrate a multiprotocol blood-processing machine 100. Generally, a 
top panel 1 08 of the blood-processing machine 1 00 supports three peristaltic pumps 110, 112, 114; a series of pinch 
valves 116, 118, 120, 122, 124; a pair of air detectors 130, 132; a drip counter 136; a centrifuge well 140; a donor 
pressure monitor 154; a system pressure monitor 155; and a weigher 146. These components cooperate with a dis- 
55 posable installed on top panel 1 08. A lid 1 60 closes over top panel 1 08 for storage purposes. A control panel 1 64 and 
a display panel 162, provided on an inner side of the lid 160, provide information to and receive commands from an 
operator when the lid is open and machine 100 in operation. 

[0015] The specific components of a representative disposable 400 and the components of blood-processing ma- 
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chine 1 00 with which they cooperate appear in Fig. 4, and are described in greater detail below. With particular reference 
to Figs. 1 and 2, the centrifuge well 1 40 contains a vacuum chuck (not shown) that receives the bowl body of a centrifuge 
bowl 41 0. The vacuum chuck holds centrifuge bowl 41 0 (see Fig. 4) within the well 1 40, and a cover 1 48 closes over 
the well and bowl. Further details of a representative well construction are shown in U.S. Patent No. 4,889,524 (issued 
5 12/26/89). The centrifuge well 140 also incorporates bowl optics 142 (not shown in these views) that detect levels of 
different fluid components within the bowl by sensing the transmissivities of those fluids. 

[0016] The pinch valves 116, 118, 120, 122, 124 interrupt fluid flow in the tubes of disposables during the course of 
machine operation. A blood-line air detector 132 and an anticoagulant air detector 130 detect the presence of air in 
the tubes to the donor and from the anticoagulant source, respectively. A blood pump 110, an optional surge pump 

to 112, and an anticoagulant pump 1 1 4 move whole blood, the separated blood constituents, and anticoagulant, respec- 
tively, through the tubes between the anticoagulant source, the donor, and the various blood component storage bags 
described below. An anticoagulant drip counter 136 monitors passage of anticoagulantthrough an anticoagulant cham- 
ber of the disposables. Blood-component storage bags hang from a weigher 146 that monitors the overall quantity of 
the components removed from the donor. A rigid plastic manifold of the disposables engages a manifold holder 144; 

15 similarly, an anticoagulant tube support is detachably held by an anticoagulant pump holder 150. A system pressure 
monitor 155 and a donor pressure detector 154 detect pressure in the disposable. 

[001 7] The blood-processing machine 1 00 is preferably capable of performing various apheresis and blood-process- 
ing protocols, e.g., the SDP protocol, the PLP protocol, therapeutic plasma exchange, mononuclear cell collection, 
and red-cell collection. To perform any one of these protocols, the operator chooses and installs a properly configured 

20 disposable and also invoke the corresponding protocol-implementing software in the machine. The software controls 
the operation of the machine, causing it to perform the sequence steps that define the protocol. 
[0018] Fig. 4 shows an exemplary disposable 400 configured for the SDP protocol. Also schematically shown in Fig. 
4 are the components of machine 1 00 that cooperate with the disposable at various points of connection. It should be 
noted that differently configured disposables may be required for other ones of the protocols indicated above. These 

25 other disposables are also compatible with machine 100, and the invention is not limited to a particular disposable 
configuration or type of blood-processing machine; accordingly, the machine description supplied herein is intended 
as exemplary rather than limiting. 

[0019] Disposable 400 generally comprises a pair of storage bags 450, 452, tubes, and a centrifuge bowl 41 0, all of 
which are pre-sterilized. The interior passages of disposable 400 are entirely sealed from the blood processing machine 

30 1 00 and the outside air to avoid contamination. Basically, blood-processing machine 1 00 controls the flow of blood and 
anti-coagulant into and out of the bowl 410 using pumps 110, 112, and 114, and pinch valves 116, 118, 120, and 122. 
Bowl 41 0 is a blood separator that utilizes centrifugal forces to fractionate the blood from the donor. 
[0020] A needle 402 is used to perform the venipuncture of the donor. The needle 402 supplies the blood, via a tube, 
to a four-port connector 404. Connected to one outlet of this four-port connector is a whole-blood sample bag 406, 

35 which admits a sample of the donor's blood for testing. Also connected to the four-port connector 404 is a tube 408a 
providing anticoagulant, which is drawn from a reservoir (not shown). Downstream of the anticoagulant reservoir is a 
clear plastic tube 422, which communicates with the drip counter 136 that detects the flow of anticoagulant. A bacterial 
filter 412 is connected in-line to ensure that bacteria from the donor's blood or bacteria from the anticoagulant source 
is captured to prevent any cross-contamination of the collected blood. An anticoagulant tube support 428 provides a 

40 rigid structure for an arcuate tube 430, which cooperates with the anticoagulant pump 1 1 4. Pump 1 1 4 precisely controls 
the flow of anticoagulant into the four-port connector 404. An anticoagulant line air monitor 1 30 detects any introduction 
of air from the anticoagulant reservoir. 

[0021 ] A tube 408b connects the four-port connector 404 to a blood filter 41 4 that filters large insoluble material (e. 
g., clotted blood) from the blood components returned to the donor. Another tube 408c connects the blood filter 414 
45 to a manifold 420. On this length of tubing, a blood line or "red" valve 1 1 6 and a blood line air detector 1 32 are disposed 
adjacent to the tubing 408c so that fluid flow to the donor can be selectably cut off and any air in tube 408c detected. 
Also, a tube 408d connects the donor pressure monitor 1 54 to the return flow to the donor. 

[0022] Manifold 420 is a blood couplerthat connects tubes between ports of the bowl and from/to the donor. It supports 
two lengths of arcuate tubing 424, 426 which fit over the blood pump 1 1 0 and the surge pump 1 12. Tubing 408e then 

50 connects the manifold 420 to an input port 41 6 of the centrifuge bowl 41 0. The bowl optics 1 42 detect fluid levels within 
the bowl 41 0. An output port 41 8 of the bowl 41 0 connects to a "T" connector 433 that divides fluid from the bowl 41 0 
between an air/plasma bag 434, which connects back to the manifold 420, and a reservoir bag 436. System pressure 
monitor 1 55 is connected by T connector 433 to the output port 41 8 of the centrifuge bowl 41 0, enabling monitor 1 55 
to detect system pressure at this point. 

55 [0023] A second pinch or "yellow" valve 1 1 8 is enables shut-off any flow between the "T" connector 432 and the air/ 
plasma bag 434. A green valve 1 20 enables shut-off of flow between the "T" connector 432 and the reservoir bag 436. 
Leading out of the reservoir bag 436 is white blood cell filter 438, which filters white blood cells from the platelets to 
be stored into first and second platelet bags 450, 452. Also connected to the output of the white blood cell filter 438 is 
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a platelet sample pouch 454, which holds a sample of the collected platelets that may be taken during the performance 
of the protocol. 

[0024] During performance of the SDP protocol, the blood-processing machine 100 first enters a draw state in which 
whole blood is withdrawn from the donor's vein. This is accomplished by developing a negative pressure in the lines 

5 connected to the patient's vein by operation of the blood pump 110. Simultaneously with the withdrawal of the whole 
blood, the anticoagulant pump 1 1 4 is operated so that anticoagulant is mixed with the blood at the four-port connector 
404. The centrifuge bowl 41 0 is brought up to a predetermined separation speed (approximately 4,800 revolutions per 
minute typically); yellow valve 11 8 is opened and green valve 118 closed. The blood pump 110 propels the whole blood, 
now mixed with anticoagulant, through tube 408e into the input port 41 6 of the centrifuge bowl 41 0, displacing sterile 

to air from bowl 41 0 into the air/plasma bag 434. Eventually the plasma begins to overflow the walls of bowl 41 0, and is 
also directed to the air/plasma bag 434. After about a minute, the surge pump 1 1 2 is activated, recirculating the plasma 
held in the air/plasma bag 434 into the centrifuge bowl 41 0 via tubes 408f , 424 and 408e. After approximately another 
minute, a reading is taken with the bowl optics 142 to determine the optical density of the blood components in the 
bowl 41 0. Subsequently, a dwell state is entered in which pump 1 1 2 continually recirculates the plasma at approximately 

15 100 milliliters per minute through the bowl 410 in order to enhance the separation of the cell layers. After the dwell 
state the surge state begins, during which pump 1 1 2 rapidly pumps the plasma from the air/plasma bag 434 into the 
centrifuge bowl 410. This surge recirculation of plasma continues until the bowl optics 142 detects the presence of 
platelets. When that occurs, the green valve 120 to the platelet bags 450, 452 is opened and platelets are collected. 
[0025] Once no further platelets are detected by bowl optics 1 42, a return state is entered in which uncollected blood 

20 components are returned to the donor. Pump 1 1 2 pumps all plasma in the air/plasma bag 434 into the centrifuge bowl 
410, and the mixture of red blood cells and plasma now contained in the centrifuge bowl 404 is returned to the donor 
by reversing the direction of the blood pump 110. During this period, the blood line air detector 132 actively monitors 
for the existence of any air in the returning mixture of red blood cells and plasma while the donor pressure detector 
154 ensures that excessive pressure is not generated. The platelets collected in the first and second platelet bags 450, 

25 452 are then disconnected and properly stored. 

[0026] In blood-processing machines dedicated to a single protocol, there is a possibility that an operator might select 
a disposable that is incompatible either because it is made by different manufacturer or because it was made for a 
differenttype of machine. Generally this is not a problem, since in such cases the disposable ordinarily will not physically 
fit within the machine, preventing its operation. Such is not always the case, however, and the disposable-matching 

30 feature of the present invention can be implemented on a single-protocol machine as a means of ensuring compatibility 
between the disposable and the machine. Of course, the danger of improper disposable selection becomes more 
significant in the case of multiprotocol blood-processing machines, as contemplated herein. A plurality of disposables 
are designed to be physically compatible with the blood-processing machine, but only one or a subset of which is 
compatible with a selected protocol. In the past, responsibility for making the correct selection of the disposable for 

35 the desired protocol has rested solely with the machine operator. 

[0027] Refer now to Fig. 5, which illustrates an underside of the manifold 420 that ensures a proper match between 
the disposable and the selected protocol. The manifold 420 comprises a rigid plastic housing 510 that supports the 
two arcuate tubes 424, 426 which cooperate with the pumps 110, 112 to control the passage of fluid in the tubes. Also 
on a bottom side of manifold 420 are two female clip points 515, 520 formed in the housing 51 0 and a bar code label 

40 530. The manifold 420 shown in Figs. 4 and 5 is adapted to be connected into the manifold holder 1 44 shown in Figs. 
1 and 2 by the engagement of the female clip points 515, 520 over the corresponding male clip points 1 62, 1 64. The 
manifold holder 144 has a light emitter and detector array 1 66 comprising eight emitter/detector pairs for detecting a 
bar code imprinted on the label 530. This bar-code label identifies the type of disposable with which it is associated. 
The array 1 66 reads this code and conveys the information to appropriate processing components (described below) 

45 in the blood-processing machine 1 00, which verify a proper match between the installed disposable and the particular 
protocol selected by the operator. 

[0028] Alternatively, the bar code can be applied to another area of the disposable (e.g., to the origin label on the 
top side of the manifold) and read by a wand or other manually operated bar-code reading device. 
[0029] Indeed, the bar code itself, while preferred for its convenience and economy, can be replaced with other forms 
50 of electronic tagging. For example, the disposable identity information can be contained on a magnetic strip, or on a 
low-power broadcast "beacon" detectable by receiving electronics located in the machine 100. 

[0030] Another safety feature, illustrated in Fig. 3, is the retention of protocol-related information (e.g., the computer 
code that tells the blood processing machine how to perform particular blood processing protocols) necessary for 
execution of the protocol in a discrete portion of computer memory, such as on a removable memory card 172. A 
55 receiving slot for card 172 is located on one side of machine 100, behind a door 170. Card 172 may also contain 
security information. In this way, in order to perform a protocol the operator must affix the correct disposable to machine 
1 00 and also insert the proper card into the receiving slot. 

[0031] This distribution of operating information represents a substantial departure from past practice and confers 
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benefits beyond security. Heretofore, both protocol-dependent instructions (i.e. the information that directs performance 
of a particular protocol) and safety-related information were not stored discretely from one another, instead residing in 
an integrated fashion on the same read-only memory (ROM) permanently installed within the machine; as a result, 
protocol-specific alterations have required reconfiguration, retesting and revalidation of the entire ROM, followed by 
5 its replacement by a trained technician. This drawback is particularly acute in actively changing environments, where 
new protocols are being continually added while older protocols are updated or deleted. 

[0032] The integrated approach characteristic of prior machines also makes it difficult to selectively accord access 
not only to the machine but to specific ones of the executable protocols. Although the safety- related information is 
generally relevant regardless of the particular protocol being performed, the different protocols may not be relevant to 
to the various operators of a given multiprotocol blood processing system. That is, particular operators may need access 
to only one or two protocols; experimental protocols, for example, should not be available to all operators. Moreover, 
excessive protocol availability complicates the operator's task since s/he must select from all of the possible protocols 
a particular machine can perform. 

[0033] In one approach, the invention obviates these problems by dividing the code, as shown in Fig. 6, between a 
15 PROM 640 and the removable card 1 72. The PROM 640 contains an operating system and information relating to the 
monitoring of proper operational thresholds for the maximum allowable air in the tubes, maximum developed pump 
pressures and speeds, and the maximum amount of whole blood that can be removed from a donor at any given time. 
In contrast, card 172 contains information particular each protocol for which the machine is adapted. Preferably, card 
1 72 contains sequential instructions that define one or more protocols, and which direct the machine to execute those 
20 protocols. Depending on the skills of the operator entrusted with the card, a single or multiple protocols can be contained 
thereon. 

[0034] In an alternative approach, the code can be divided between portions of the same memory device by parti- 
tioning, i.e., maintaining full functional discreteness between the operating system and the protocol instructions; in this 
way, protocols can be modified, added or discarded without disruption of the monitoring and safety software. Thus, 

25 memory card 172 can contain both the operating system and protocol instructions, or can be dispensed with entirely 
and all code stored on PROM 640 (or other storage device). As used herein, the term "computationally distinct" refers 
to maintaining the separation between portions of computer code by physical separation or memory partitioning. 
[0035] This strategy for code division yields a number of advantages. First, the safety-related code need not be 
updated and revalidated each time a new protocol is updated or added; instead, new cards can be created and furnished 

30 to end users. Second, the person or entity responsible for proper machine operation can retain control over which 
operators have access to the machine or can perform particular protocols. By assigning cards for specific protocols 
only to those operators who have been trained therefor, the risk of improper operation is minimized. 
[0036] The approach for dividing the software is best be understood with reference to the hardware and software 
architecture of the blood-processing machine. With continued reference to Fig. 6, a CPU 610 controls a series of 

35 machine elements or devices 630 of the blood processing machine by signals provided on line 632. "Devices 630" is 
intended as a generic term covering such operative machine elements as the anticoagulant pump 150, surge pump 
112, blood pump 110, the donor and system pressure monitors 1 54, 1 55, bowl optics 1 42, the anticoagulant drip counter 
1 36, the anticoagulant air detector 1 30, and blood line air detector 1 32. Operation of CPU 61 0 is controlled by instruc- 
tions contained on card 172 and a PROM 640, which in combination define the steps in the protocols and also allow 

40 CPU 610 to detect, by monitoring various levels associated with devices 630, unsafe conditions. In particular, CPU 
610 monitors the signal outputs from each of these devices, provided on a line 634 through a buffering resistor Rx, 
and compares these signals with threshold levels specified in PROM 640. In the event that the CPU 610 detects a 
value mismatch that would threaten the safety of the donor (a "critical fault condition"), the CPU, via line 636, activates 
or opens the safety/master relay K-1 through the fault summer 662. The opening of relay K-1 interrupts all power to 

45 the valves 116-124 and to the pumps 110-114. The CPU 610 senses the state of the relay K-1 through a first relay 
feedback 664. 

[0037] In an alternative configuration, machine 100 can be adapted to receive protocols (or changes thereto) by 
electronic transmission. In this implementation, memory card 1 72 is replaced with an internal storage device 645, such 
as a hard disk drive. A communication device 647, such as a modem, receives protocol-related information from an 

50 outside source. The operating system executed by CPU 610 is programmed to accept protocols only from legitimate 
sources, which identify themselves as electronic communication is initiated. In this way, users of machine 100 can 
immediately obtain the latest available protocols and instructions implementing them, and the manufacturer of machine 
100 is spared the inconvenience of direct reprogramming or provision of replacement memory components. 
[0038] To provide a level of redundancy, a hardware safety card 650 is preferably connected in parallel with the CPU 

55 610, and also monitors the operation of the devices 630. The safety card 650 accepts direct coded information from 
the CPU 610 concerning the states of the devices 630. In response to this state information, the safety card 650 
assesses the operation of devices 630 to ensure that they are operating within safe limits for the particular state. For 
example, a motor encoder on each of the pumps 110, 112, 114 and signals from the valves 1 1 6-1 22, pressure detectors 
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154 and 155, and air detectors 130, 132 are sampled to ensure that an unsafe condition does not exist in the context 
of the particular state. The safety card 650 monitors the same output from the devices 630 as the CPU 61 0 except that 
it is buffered by a buffering and isolation resistor RY. The safety card 650 compares the states of the devices 630 to 
values indicated by a CPU code provided on line 638 from the CPU 61 0. If the information from the devices 630 agrees 
with the particular state, then the safety card 650 will not intrude on system operation. If, however, the safety card 650 
detects a critical fault condition, it opens the safety/master relay K-1 through the fault summer 662. For example, the 
following table illustrates representative ranges of operation, forthe SDP protocol, of the blood pump 1 1 0, anticoagulant 
pump 114, donor valve 11 6, donor air detector 132, anticoagulant air detector 130, donor pressure monitor 154, and 
the quantity of extracorporeal blood volume as determined the weigher 1 46 for both a draw (in which blood is removed 
from the donor) and a return (in which the uncollected components are returned back to the donor). 
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[0039] The safety card 650 also controls a pump relay K-2 through a fault summer 668. This relay K-2 is opened to 
remove power to the pumps whenever a critical fault condition is encountered by the safety card 650, when a self-test 
of the safety card 650 is executed at the beginning of a protocol or in a standby mode, and if a motor over-temperature 
detector 670 detects overheating of any of the pumps 1 1 0-1 1 4. A second relay feedback 666 provides an indication of 
the state of the pump relay K-2 to both the CPU 610 and to the safety card 650. In this way, the safety card 650 
independently verifies pump valve and sensor feedback to ensure it is within the safety limits defined by the state 
information from the CPU 610. If a fault condition is detected, power is shut down from all the valves and safety relevant 
pumps in addition to generating an audible alarm to warn the operator. 

[0040] Turning now to a preferred software implementation, at the very highest level a foreground routine called a 
general process control architecture (GPCA), the operation of which is illustrated in Figs. 7A and 7B, functions as an 
operating system to control the execution of various programs including resource allocation scheduling, input/output 
control, and data management. As illustrated in the figures, the GPCA is designed as a continuous flow system in 
which two main control units, a User Interface Manager (UIM) 740 and an Instrument Control Manager (ICM) 742 are 
repeatedly executed after initialization of the system in steps 710-738. 

[0041] The first step in the initialization process is generally intended to ensure correspondence between the card 
172 and the blood-processing machine 100. To accomplish this, insertion of card 172 is detected in step 710, and a 
security code is read from card 172 in step 712. This security code is compared with a code stored in the PROM 640 
in step 714. If a proper match is not detected in step 716, an error signal is generated and an alarm sounded in step 
71 8, disabling the machine. At this level, the security code facilitates overall control of access to the machine. 
[0042] In an optional step 720, the blood-processing machine 100 prompts for and then reads an operator-entered 
password. This password is compared in step 722 to a password stored on the PROM 640 and/or on the card 172. 
Again, as determined in step 724, if the operator-entered password fails to match the stored password, an alarm is 
sounded in step 726 and the machine is disabled. Password entry provides still a further element of access control. 
[0043] Once the security code on the card 1 72 and the password have been properly presented to the blood-process- 
ing machine 1 00, the machine reads the protocols stored on the card 1 78 in step 728. Then in step 730, these stored 
protocols are identified to the operator, who may select one of them. The number of protocols selectable by an operator 
depends on his or her experience. The selected protocol is associated with an identifier corresponding to an allowed 
type (or types) of disposable; the disposable actually installed on the blood-processing machine is then identified to 
determine whether it is compatible with the protocol in step 732. As described earlier, the blood-processing machine 
determines the disposable type by reading the bar code label 530 on the disposable manifold 420. In step 734, the 
blood-processing machine determines whether there is a proper match between the selected protocol and the installed 
disposable. If not, an error signal is generated in step 736 and the machine is disabled. If a proper match is detected, 
however, the machine waits in step 738 for the protocol to be initiated by the operator. Once the protocol has been 
initiated, the user interface manager 740 and the instrument control manager 742 are continually executed. 
[0044] The GPCA interunit communication method employs message passing between the UIM 740 and the ICM 
742. These two modules communicate back and forth to each other by placing messages on each other's queues. The 
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GPCA generally performs the functions of an operating system, i.e., basic hardware control, the execution of application 
programs and CPU resource scheduling. Although certain tables accessed by the UIM and ICM are contained on the 
card 172, the GPCA is contained on PROM 640. 

[0045] As shown in Fig. 8, the UIM 740 performs two main tasks each time it is called by the GPCA. These tasks 
5 generally involve communication with an operator. First, the UIM 740 contains a keypad driver 81 0 that enables a key 
interpreter 820 of the UIM to monitor the key panel 164 (see Fig. 1) for any operator inputs. Incoming messages from 
an operator are then passed to the ICM queue 825. The software for controlling key panel and queuing of messages 
is well-characterized and straightforwardly implemented by those skilled in the art; preferably this software is located 
on the PROM 640. 

10 [0046] The other operation performed by the UIM is control of the display panel 162. Generally, a display manager 
830 of the UIM is responsible for updating the display panel 162 in response to, for example, a state change at the 
ICM level. Although software that controls the driving of the display 850 is preferably located on the PROM 640, the 
particular information to be displayed (such the font format and the specific text characters) are preferably located in 
UIM state tables 840 on the card 172. This distribution is preferred because the particular displayed information is 

15 generally protocol-dependent while the software for controlling the display panel is not. 

[0047] The GPCA also implements the ICM 742, which executes the sequence of steps defining a protocol and 
operates devices 630 in accordance therewith. The basic ICM code is preferably located on the PROM 640, while 
protocol sequence steps reside on card 172; the ICM is capable of executing any protocol appropriately arranged into 
such steps. The PROM 640 preferably also contains hardware-specific code, such as the device drivers that control 

20 the pumps, valves, centrifuge, and other machine elements; code for interpreting the raw signals from the devices that 
provide state information (e.g., the speed of centrifuge 140 and the levels recorded by air detectors 130, 132, drip 
monitor 136, and bowl optics 142); and the safety-monitoring instructions that define unsafe conditions and their re- 
sponses thereto, all as described hereinabove. 

[0048] Memory card 1 72 contains the sequence tables that define the successive states or steps (ordinarily bundled 
25 as sequences, as discussed below) of a protocol and the conditions that determine when each new step is executed. 
Dynamic linking between the PROM 640 and the card 172 allow their respective software code to remain physically 
separate while cooperating fully. 

[0049] Fig. 9 shows the process steps of the ICM that are performed each time the ICM is called by the GPCA. First, 
in steps 91 0 and 920 the ICM acts on any messages availablefrom the UIM. Then the conditions of the current sequence 
30 are checked in step 930 by reading from the sequence table 980. This operation is accomplished using a sequence 
table pointer module that addresses the current sequence table 980. If the conditions are satisfied (step 940), the 
sequence table pointer is advanced in step 950 and the next sequence is retrieved and executed from the table of card 
172 in step 960. 

[0050] Fig. 10 illustrates the sequence steps that are executed by the ICM for a draw operation, in which whole blood 
35 is removed from the donor and pumped into the centrifuge bowl 41 0; these steps together define the draw operation 
within the protocol, which itself consists of a plurality of such operations. Upon receipt of the message from the UIM 
that a draw key has been selected, a sequence table stored on card 1 72 that defines the steps in a draw operation is 
accessed by the sequence table pointer. 

[0051 ] As shown in Fig. 12, the sequence table 980 in the card 1 72 sets forth the successive sequences 1 220 (each 
40 comprising a plurality of steps) representing a protocol. These sequences 1220 are accessed by the sequence table 
pointer 1230, which is incremented through the table 980 to next sequence at the completion of the preceding sequence. 
The first sequence is Draw Begin (shown at reference numeral 1 01 0 of Fig. 1 0). The conditions indicating completion 
of this sequence are a closed centrifuge cover and activation of the vacuum chuck holding the centrifuge bowl 410. 
Once these conditions have been met (as would be determined in step 930 and 940 of Fig. 9), the sequence table 
45 pointer 1230 is advanced in step 950 and the next sequence is retrieved in step 960. That sequence involves opening 
the blood line "red" valve 1 1 6 (step 1 020 in Fig. 1 0). The condition representing completion is verification that the blood 
line valve 1 1 6 did in fact open. Execution proceeds to activation of the centrifuge 1 40 (step 1 030 in Fig. 1 0). After the 
centrifuge 1 40 reaches or exceeds a speed of 4,800 rpm, the blood pump 1 1 0 is started (step 1 040 in Fig. 1 0). When 
the pump reaches a speed of 60 rpm, the bowl 41 0 begins to fill (step 1 050 in Fig. 1 0). A surge sequence (step 1 060 
50 in Fig. 10) is initiated only when the optics 142 of the well 140 have reached a trip level indicating that an adequate 
amount of blood is now contained in the bowl 41 0. 

[0052] The sequence steps 1220 defined in the sequence table 980, stored on card 172 and executed by the ICM, 
do not includes steps to monitor the current state of the blood-processing machine 1 00 to ensure that no danger exists 
to the donor. That function is performed by a task dispatcher, whose operation is illustrated in Fig. 11 . The task dis- 
55 patcher is called every 50 ms by an interrupt, and resides on the PROM 640. Every time the task manager is called (i. 
e. , every 50ms interrupt), safety-monitoring functions are organized in a stack 1110. Then in steps 1 1 20 and 1 1 30, the 
task manager increments through the stack and performs each of the functions. Finally, in step 1140, other house- 
keeping functions also assigned to the task manager are performed. 
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[0053] The safety-monitoring functions are generally concerned with reviewing levels associated with the various 
devices to ensure that the donor is not in any danger. For example, the following tasks are performed every time the 
task manager is called while a protocol is being performed: pump speed and position monitor task, which ensures that 
the pumps are operating within safe limits; centrifuge 140 speed monitor tasklo ensure that the centrifuge's speed is 
5 with safe limits; pressure monitor task to ensure that the pressure in the tubes to the donor is not dangerously high or 
low based on the signal from monitor 154; air detector monitor task to detect air in the tubes to the donor or from the 
anticoagulant bag based on signals from air detectors 1 30, 132; and a spill detect tasklo detect any blood accumulating 
in the centrifuge well 1 40. 

[0054] In summary, the above-described software architecture allows a generic operating system and safety-moni- 
fo toring system to execute any of a variety of apheresis or blood-processing protocols. Instruction steps defining these 
protocols may be carried on a operator-insertable card, which can also include password and access-control informa- 
tion. 

[0055] In an alternative embodiment, the above-described software architecture can be altered by placing information 
contained in the card 1 72 into a separate memory device installed within the blood processing machine or into a discrete 
15 portion of the memory on the PROM 640. Specifically, as shown in Fig. 13, the code for the GPCA, UIM, ICM, and task 
manager may be placed in a portion 1310 of the PROM 640 which is separate from a portion 1 320 dedicated to the 
UIM state tables and sequence tables. Of course, in this embodiment the card 1 72 is not strictly necessary, sacrificing 
the advantages associated with provided operator-held "keys" but retaining the ability to separately validate protocol- 
specific code. 

20 [0056] In another alternative embodiment, one of the displayed and selectable protocols in step 730 of Fig. 7a can 
be a tutorial. As shown in Fig. 14, if this tutorial is selected, the processing is transferred entirely to the card 172 in 
step 1 420. As a first part of the tutorial, images stored on the card 1 72 are successively presented on the display panel 
162. These images illustrate, for example, the proper technique for installing the disposable in step 1430. The next 
part of the tutorial might be hooking the donor to the machine, as illustrated in step 1440. After this demonstration, 

25 display panel 1 62 might provide an illustration of the various processes performed in a generic blood-processing pro- 
tocol while temporarily activating the corresponding parts of the blood-processing machine 1 00 in step 1 450, thereby 
acquainting the operator with the machine. Finally in step 1 460, the proper technique for unhooking the donor might 
be presented. 

[0057] While this invention has been particularly shown and described with references to preferred embodiments 
30 thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein 
without departing from the scope of the invention as defined by the appended claims. For example, the computer 
memory components described herein may be implemented as random-access memory (RAM), on EPROMs, Flash 
ROM or other non-volatile memory, or on mass-storage devices (such as floppy disks or CD-ROMs) readable into RAM. 

35 

Claims 

1 . The combination of a blood processing machine (1 00) and a disposable set (400) for use therein, the disposable 
set including a separator (410) for separating whole blood into blood constituents, a tube (408e) for conveying 

40 blood into the separator, an outlet tube (408f) for conveying the blood constituents away from the separator, a 

veine puncture tube (408b), a manifold (420) connecting the inlet tube to the outlet tube and to the veine puncture 
tube, and a machine-readable indication (530) on the disposable set (400) for identifying a protocol with which the 
set is properly used, and the blood processing machine (1 00) includes a panel (1 08) for accepting the disposable 
set, a reader (1 66) for reading the machine-readable indication (530), a database (640, 1 72) comprising a plurality 

45 of stored instruction sets, each set directing the implementation of a specific protocol by the machine (100) ac- 

cording to the instruction set characterized in that the separator is acentrifuge bowl (41 0), the panel (1 08) includes 
a centrifuge well (1 40) for supporting the bowl (41 0) and the machine (1 00) includes means for selecting an in- 
struction setfrom the database (640, 1 72) for implementation by the machine (1 00) based on the machine-readable 
indication (530) on the disposable set (400) to control the fluid flow to and from the centrifuge bowl (41 0). 

50 

2. The combination defined in claim 1 wherein the machine-readable indication comprises a bar code label affixed 
to the manifold (420). 



55 Patentanspruche 

1. Kombination eine Blutbearbeitungsmaschine (100) und eines Einwegbestecks (400) fur die Verwendung in der- 
selben, wobei das Einwegbesteck folgendes einschlieGt: einen Separator (410) zum Trennen von Vollblut in die 
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Blutbestandteile, eine Rohre (408e) zum Befordern des Bluts in den Separator, eine AuslaBrohre (408f) zum Weg- 
befordern der Blutbestandteile aus dem Separator, eine Venenpunktionsrohre (408b), einen Verteiler (420), der 
die EinlaOrohre mit der AuslaOrohre und der Venenpunktionsrohre verbindet, und eine maschinenlesbare Anzeige 
(530) auf dem Einwegbesteck (400) zum Identifizieren eines Protokolls, mit dem das Besteck richtig verwendet 
wird, und die Blutbearbeitungsmaschine (100) schlieBt eine Platte (108) zum Aufnehmen des Einwegbestecks, 
einen Leser (1 66) zum Lesen der maschinenlesbaren Anzeige (530), eine Datenbank (640, 1 72), die eine Vielzahl 
von gespeicherten Befehlssatzen umfaBt, ein, wobei jeder Satz die Realisierung eines spezifischen Protokolls 
durch die Maschine (100) in Ubereinstimmung mit dem Befehlssatz leitet, dadurch gekennzeichnet, daB der 
Separator ein Zentrifugenkessel (41 0) ist, die Platte (1 08) einen Zentrifugenschacht (1 40) zum Tragen des Kessels 
(410) einschlieOt und die Maschine (100) Mittel zum Wahlen eines Befehlssatzes aus der Datenbank (640, 172) 
fur die Realisierung durch die Maschine (100) auf der Grundlage der maschinenlesbaren Anzeige (530) auf dem 
Einwegbesteck (400) einschlieBt, um den Fluidstrom zu und von dem Zentrifugenkessel (410) zu steuern. 

2. Kombination nach Anspruch 1 , bei der die maschinenlesbare Anzeige ein am Verteiler (420) angebrachtes Strich- 
code-Etikett umfaBt. 



Revendications 

1 . Combinaison d'une machine de traitement du sang (1 00) et d'un set jetable (400) destine a une utilisation corres- 
pondante, le set jetable englobant un separateur (41 0) pour separer le sang entier en des composants du sang, 
un tube (408e) pour transferer le sang dans le separateur, un tube de sortie (408f) pour transferer les composants 
du sang a I'ecart du separateur, un tube de ponction veineuse (408b), un collecteur (420) raccordant le tube d'ad- 
mission au tube de sortie et au tube d ponction veineuse, et une indication lisible par la machine (530) sur le set 
jetable (400) pour identifier un protocole avec lequel le set peut etre utilise de maniere appropriee, la machine de 
traitement du sang (1 00) englobant un panneau (1 08) pour recevoir le set jetable, un lecteur (1 66) pour lire I'indi- 
cation lisible par la machine (530), une base de donnees (640, 1 72), comprenant plusieurs groupes destructions 
enregistres, chaque groupe dirigeant la mise en pratique d'un protocole specifique par la machine (1 00) en fonction 
du groupe destructions, caracterisee en ce que le separateur est un bol de centrifugation (410), le panneau 
(108) englobant un puits de centrifugation (140) pour supporter le bol (410), la machine (100) englobant un moyen 
pour selectionner un groupe destructions a partir de la base de donnees (640, 1 72) en vue de I'execution par la 
machine (1 00), en fonction de I'indication lisible par la machine (530) sur le set jetable (400) pour controler I'ecou- 
lement du fluide vers le bol de centrifugation (41 0) et en provenance de celui-ci. 

2. Combinaison selon la revendication 1 , dans laquelle I'indication lisible par la machine comprend une etiquette de 
code a barres fixee sur le collecteur (420). 
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